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IN THE CLAIMS: 

This set of claims replaces all previous claim sets. Please amend the claims as follows: 

1 . (Currently Amended) An energy management device for use in an energy management 
architecture for managing an energy distribution system, said energy management 
architecture comprising a network, said energy management device comprising: 

an energy distribution system interface operative to couple said energy 
management device with at least a portion of said energy distribution system; 

a network interface operative to couple said energy management device with said 
network for transmitting outbound communications to said network and receiving 
inbound communications from said network, said inbound communications comprising 
first energy management data and said outbound communications comprising second 
energy management data; 

a processor coupled with said network interface and said energy distribution 
system interface, said processor operative to perform at least one energy management 
function on said at least a_said-portion of said energy distribution system n e twork via said 
energy distribution system interface, said processor further operative to process said first 
energy management data and generate said second energy management data as a function 
of said energy management function; 

wherein at least one of said inbound communications comprises a- at least one 
secured inbound communication communications , said network interface further 
comprising a security module operative to secure said outbound communications and 
validate said at least one secured inbound communication communications . 

2. (Original) The energy management device of Claim 1, wherein said at least one secured 
inbound communication is at least encrypted, said security module further operative to at 



3. (Original) The energy management device of Claim 2, wherein said security module is 
capable of encrypting and decrypting using at least one of Secure Multipurpose Internet 



least one of: 



b. 



a. 



selectively encrypt said outbound communications; and 
decrypt said at least one secured inbound communication. 
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Mail Extensions ("S/MIME"), Extensible Markup Language ("XML") Encryption, 
Secure Sockets Layers ("SSL"), and Pretty Good Privacy ("PGP"). 

4. (Currently Amended) The energy management device of Claim 2, wherein said security 
module is capable of selectively encrypting said outbound communications 
communication for decryption only by an intended recipient of said outbound 
communications communication . 

5. (Currently Amended) The energy management device of Claim 2, wherein said security 
module is capable of selectively encrypting said outbound communications 
communication for transmission over a portion of said network. 

6. (Currently Amended) The energy management device of Claim 2, wherein said at l e ast 
ene secured inbound communication is further at least signed, said security module 
further operative to at least one of: 

a. prior to encryption, selectively sign said outbound communications-prief 
to e ncryption ; 

b. selectively sign said encrypted outbound communications; 

c. prior to decrypting, authenticate said at least one secured inbound 
communication prior to d e crypting ; and 

d. after decrypting, authenticate said at least one secured inbound 
communication aft e r decrypting . 

7. (Original) The energy management device of Claim 6, wherein said signed encrypted 
outbound communications comprises at least one of a public key, a Public Key 
Infrastructure ("PKI") certificate, a message digest and an Extensible Markup Language 
("XML") signature. 

8. (Currently Amended) The energy management device of Claim 6, further comprising a 
memory coupled with said processor and storing a private key, wherein said security 
module is further operative to retrieve a first public key of a recipient of said outbound 
communications communication via said network if not already obtained, said security 
module is further operative to one of: 
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a. encrypt said outbound communications based on said first public key and 
sign said encrypted outbound communications based on said private key; and 

b. sign said outbound communications with said private key and encrypt said 
signed outbound communications with said public key; and 

further wherein said security module is further operative to retrieve a second 
public key of a sender of said inbound communication via said network if not already 
obtained, said security module being further operative to one of: 

c. decrypt said at least one secured inbound communication communications 
based on said private key and authenticate said decrypted at least one secured inbound 
communication communications based on said second public key; and 

d. authenticate said at least one secured inbound communication 
communications based on said second public key and decrypt said authenticated at least 
one secured inbound communication communications based on said private key. 

9. (Original) The energy management device of Claim 2, wherein said outbound 
communications comprises at least one electronic mail message. 

10. (Original) The energy management device of Claim 1, wherein said at least one secured 
inbound communication is at least signed, said security module further operative to at 
least one of: 

a. selectively sign said outbound communications; and 

b. authenticate said at least one secured inbound communication. 

1 1 . (Currently Amended) The energy management device of Claim 1 0, wherein said security 
module is capable of at least one of signing and authenticating using at least one of Pretty 
Good Privacy ("PGP"), Secure Multipurpose Internet Mail Extensions ("S/MIME"), 
Extensible Markup Language ("XML") Signature, and Secure Sockets Layers ("SSL") 
protocols PGP, S/MIME, XML Signature, and SSL protocols . 

12. (Original) The energy management device of Claim 10, wherein said second energy 
management data is arranged as a plurality of data sets, each of said data sets including at 
least one data element, said security module being further operative to selectively sign 
each of said plurality of data sets. 
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13. (Original) The energy management device of Claim 10, wherein said second energy 
management data comprises a plurality of data elements, said security module being 
further operative to selectively sign each of said plurality of data elements. 

14. (Original) The energy management device of Claim 10, wherein said security module is 
further operative to periodically re-authenticate said at least one secured inbound 
communication after receipt. 

15. (Currently Amended) The energy management device of Claim 10, wherein said 
outbound communications communication comprises Extensible Hypertext Markup 
Language ("XHTML") data, said security module further comprising an XHTML module 
operative to sign said outbound communication using Extensible Markup Language 
("XML") XML signing. 

16. (Currently Amended) The energy management device of Claim 10, wherein said security 
module is further operative to exchange certificates with the-a_sender of the at least one 
secured communication prior to said signing. 

17. (Original) The energy management device of Claim 1, wherein said at least one secured 
inbound communication is at least compressed, said security module being further 
operative to decompress said at least one secured inbound communication after validation 
thereof. 

18. (Original) The energy management device of Claim 1, wherein said security module is 
further operative to compress said outbound communications prior to the securing 
thereof. 

19. (Currently Amended) The energy management device of Claim 1, wherein said 
processor is further operative to generate a first portion of said second energy 
management data prior to generating a second portion of said second energy management 
data, said network interface being further operative to generate a first portion of said 
outbound communications communication including said first portion of said second 
energy management data prior to generating a second portion of said outbound 
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communication including said second portion of said second energy management data, 
and said security module being further operative to secure said first portion of said 
outbound communication prior to securing said second portion of said outbound 
communication. 

20. (Original) The energy management device of Claim 19, wherein said network interface 
is further operative to transmit said secured first portion of said outbound communication 
independent of transmitting said secured second portion of said outbound 
communication. 

2 1 . (Original) The energy management device of Claim 1 , wherein said network interface is 
further operative to generate and store said outbound communications when said second 
energy management data is generated and secure and transmit said outbound 
communications when said energy management device is not performing said at least one 
energy management function. 

22. (Original) The energy management device of Claim 1, wherein said secured outbound 
communications are capable of being received by a first recipient and retransmitted to a 
subsequent recipient without compromising authentication by said subsequent recipient. 

23. (Original) The energy management device of Claim 22, wherein said first recipient may 
alter the format of said outbound communications for retransmission and retransmit said 
reformatted outbound communications to said subsequent recipient without 
compromising authentication by said subsequent recipient. 

24. (Original) The energy management device of Claim 1 , further comprising a memory 
coupled with said processor, said memory storing a key value and program code executed 
by said processor to implement said at least one energy management function, said stored 
program code further being associated with said key value, wherein said processor is 
further operative to validate said stored program code based on said stored key value. 

25. (Currently Amended) A method of communicating by an energy management device, 
said energy management device for use in an energy management architecture for 
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managing an energy distribution system, said energy management architecture 
comprising a network, said method comprising: 

coupling said energy management device with at least a portion of said energy 
distribution system; 

coupling said energy management device with said network wherein said energy 
management device is capable of transmitting outbound communications to said network 
and receiving inbound communications from said network, said inbound communications 
comprising first energy management data and said outbound communications comprising 
second energy management data, wherein at least one of said inbound communications 
comprises-a at least one secured inbound communication communications ; 

performing at least one energy management function on said at least asaid 
portion of said energy distribution system n e twork via said e n e rgy distribution syst e m 
int e rface , processing said first energy management data and generating said second 
energy management data as a function of said energy management function; and 

securing said outbound communications and validating said at least one secured 
inbound communication communications . 

26. (Original) The method of Claim 25, wherein said at least one secured inbound 
communication-is at least encrypted, said method further comprising at least one of: 

encrypting, selectively, said outbound communications; and 
decrypting said at least one secured inbound communication. 

27. (Original) The method of Claim 26, wherein said encrypting and decrypting further 
comprises using at least one of Secure Multipurpose Internet Mail Extensions 
("S/MIME"), Extensible Markup Language ("XML") Encryption, Secure Sockets Layers 
("SSL"), and Pretty Good Privacy ("PGP"). 

28. (Currently Amended) The method of Claim 26, wherein said encrypting further 
comprises encrypting said outbound communications communication for decryption only 
by an intended recipient of said outbound communications communication . 
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29. (Currently Amended) The method of Claim 26, wherein said encrypting further 
comprises selectively encrypting said outbound communications communication for 
transmission over a portion of said network. 

30. (Original) The method of Claim 26, wherein said at least one secured inbound 
communication is further at least signed, said method further comprising at least one of: 

signing, selectively, said encrypted outbound communications; 
signing, selectively, said outbound communications prior to encryption; 
authenticating said at least one secured inbound communication prior to said 
decrypting; and 

authenticating said at least one secured inbound communication after decryption. 

3 1 . (Original) The method of Claim 30, wherein said signed encrypted outbound 
communications comprises at least one of a public key, a Public Key Infrastructure 
("PKI") certificate, a message digest and an Extensible Markup Language ("XML") 
signature. 

32. (Currently Amended) The method of Claim 30, further comprising at least one of: 

retrieving a first public key of a recipient of said outbound communications 
communication via said network if not already obtained; 

encrypting said outbound communications communication based on said first 
public key and signing said encrypted outbound communications communication b ased 
on a stored private key; 

signing said outbound communications communication based on said stored 
private key and encrypting said signed outbound communications communication based 
on said first public key; 

retrieving a second public key of a sender of said inbound communication via said 
network if not already obtained; 

decrypting said inbound communication based on said second public key and 
authenticating said decrypted inbound communication based on said stored private key; 
and 
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authenticating said inbound communication based on said stored private key and 
decrypting said authenticated inbound communication based on said second public key. 

33. (Currently Amended) The method of Claim 26^6, wherein said outbound 
communications comprises at least one electronic mail message. 

34. (Original) The method of Claim 25, wherein said at least one secured inbound 
communication is at least signed, said method further comprising at least one of: 

signing, selectively, said outbound communications; and 
authenticating said at least one secured inbound communication. 

35. (Currently Amended) The method of Claim 34, wherein said signing and authenticating 
further comprise signing and authenticating using at least one of Pretty Good Privacy 
rPGP"), Secure Multipurpose Internet Mail Extensions ("S/MIME"), Extensible Markup 
Language ("XML") Signature, and Secure Sockets Layers f"SSL") FGF. S/MIME. XML 
Signatur e , and SSL protocols. 

36. (Original) The method of Claim 34,wherein said second energy management data is 
arranged as a plurality of data sets, each of said data sets including at least one data 
element, said method further comprising: 

signing, selectively, each of said plurality of data sets. 

37. (Original) The method of Claim 34, wherein said second energy management data 
comprises a plurality of data elements, said method further comprising: 

signing, selectively, each of said plurality of data elements. 

38. (Currently Amended) The method of Claim 34, wherein said outbound communications 
communication comprises Extensible Hypertext Markup Language ("XHTML") data, 
said method further comprising signing said outbound communications communication 
using Extensible Markup Language ("XML") signing. 

39. (Original) The method of Claim 34, further comprising: 

re-authenticating, periodically, said at least one secured inbound communication. 
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40. (Currently Amended) The method of Claim 34 further comprising: 

exchanging certificates with the-a^sender of the at least one secured 
communication prior to said signing. 

41 . (Original) The method of Claim 25, wherein said at least one secured inbound 
communication is at least compressed, said method further comprising decompressing 
said at least one secured inbound communication after validation thereof. 

42. (Original) The method of Claim 25, said method further comprising compressing said 
outbound communications prior to the securing thereof. 

43. (Currently Amended) The method of Claim 25, said method further comprising: 

generating a first portion of said second energy management data prior to 
generating a second portion of said second energy management data; 

generating a first portion of said outbound communications communication 
including said first portion of said second energy management data prior to generating a 
second portion of said outbound communications communication including said second 
portion of said second energy management data; and 

securing said first portion of said outbound communications communication prior 
to securing said second portion of said outbound communications communication . 

44. (Currently Amended) The method of Claim 43, said method further comprising 
transmitting said secured first portion of said outbound communications communication 
independent of transmitting said secured second portion of said outbound 
communications communication . 

45. (Original) The method of Claim 25, said method further comprising generating and 
storing said outbound communications when said second energy management data is 
generated and securing and transmitting said outbound communications when said energy 
management device is not performing said at least one energy management function. 
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46. (Original) The method of Claim 25, wherein said secured outbound communications are 
capable of being received by a first recipient and retransmitted to a subsequent recipient 
without compromising authentication by said subsequent recipient. 

47. (Original) The method of Claim 46, further comprising: 

altering the format of said outbound communications by said first recipient for 
retransmission and retransmitting said reformatted outbound communications to said 
subsequent recipient without compromising authentication by said subsequent recipient. 

48. (Original) The method of Claim 25, further comprising 

storing a key value; 

storing program code associated with said key value and executable to implement 
said at least one energy management function; 

validating, periodically, said stored program code based on said stored key value. 

49. (Currently Amended) An energy management device for use in an energy management 
architecture for managing an energy distribution system, said energy management 
architecture comprising a network, said energy management device comprising: 

an energy distribution system interface means for coupling said energy 
management device with at least a portion of said energy distribution system; 

a network interface means for coupling said energy management device with said 
network for transmitting outbound communications to said network and receiving 
inbound communications from said network, said inbound communications comprising 
first energy management data and said outbound communications comprising second 
energy management data; 

a processor means, coupled with said network interface and said energy 
distribution system interface, for performing at least one energy management function on 
said at least said-a.portion of said energy distribution svstem network via said energy 
distribution system interface, processing said first energy management data and 
generating said second energy management data as a function of said energy management 
function; 

wherein at least one of said inbound communications comprises a- at least one 
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secured inbound communications, said network interface means further comprising a 
security module means for securing said outbound communication communications and 
validating said at least one secured inbound communication communication s. 
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